
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier: uoTNlMgQ/EKgfiFr4NuZ0iL70iXxKZeW9v0dZ6FQQrc=
Subject key identifier: 63:C0:39:86:5E:61:5A:50:A5:C6:6E:37:FA:02:E0:FA:D3:68:B3:F6
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial: 0B46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number: 0B2B
Signing time: Tue 22 Sep 2026 19:09:35 +0000
Manifest this update: Tue 22 Sep 2026 19:09:35 +0000
Manifest next update: Tue 29 Sep 2026 19:09:35 +0000
Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: hz6uH/H1sIe9i+nrP1NwI3LRcO/8xwOqeozRmG4g7u0=)
2: 2BDF72FA8C1211F184A8D0114511F970.roa (hash: tTwJEbv0EWMSnW/LNwHMoGpK+yZ0oG8h7PMKW387DV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2886 (0xb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Validity
Not Before: Sep 22 19:09:35 2026 GMT
Not After : Sep 29 19:09:35 2026 GMT
Subject: CN=6ab2d26f-9677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:8b:fb:f0:52:b5:b5:ec:e7:a3:fb:74:d6:
43:17:59:d6:db:c6:f5:f9:f6:1a:3a:3c:1c:b9:c2:
2f:18:30:a5:33:98:a8:f1:c0:5f:c5:7a:65:34:4a:
82:b1:ac:e4:dd:9d:5d:05:3e:d9:d3:b1:1c:45:54:
50:ef:80:b7:29:df:09:2c:66:43:e2:6e:99:b9:cb:
90:85:0e:62:51:8e:e0:61:f9:ef:af:2e:ce:a7:fc:
1b:00:55:e0:bb:67:84:32:6b:36:5f:d0:27:14:67:
1a:a0:18:89:a6:09:ed:9a:0d:46:5a:7a:09:c8:1c:
82:55:21:6d:cb:c1:c9:54:ad:5d:b3:35:cc:a4:13:
50:05:bd:7d:52:28:55:57:03:de:57:6d:ce:a9:8b:
b3:fc:bb:e0:c5:e5:ac:d4:9e:bc:a5:c0:9b:62:65:
ae:24:98:20:00:5e:41:b9:60:4d:54:d6:c4:5f:5c:
c7:9d:97:8d:41:87:0c:34:f4:2b:ae:22:2d:8f:3a:
c6:5f:c8:a9:cf:86:22:c2:d1:51:f9:c6:91:11:f4:
a1:ef:42:e0:43:1f:f7:c8:26:7a:5f:d6:f3:36:76:
4e:68:3d:f7:21:5b:be:58:1a:18:96:10:cf:48:47:
7e:c5:b0:26:1f:5e:80:58:bd:fa:bd:5c:67:92:25:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:39:86:5E:61:5A:50:A5:C6:6E:37:FA:02:E0:FA:D3:68:B3:F6
X509v3 Authority Key Identifier:
keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:c1:9a:9f:0d:29:f3:11:7a:fb:0b:20:db:af:a5:25:e6:c2:
15:59:51:4c:19:db:a1:94:f4:b1:18:56:49:8b:ea:b7:89:35:
ed:40:fa:12:87:7e:29:7c:e7:08:67:19:f4:bc:e8:91:3c:6e:
f0:eb:8b:38:88:8a:9d:9a:92:eb:13:c6:16:48:6d:f7:e4:97:
fc:63:ea:ec:70:0f:2c:fe:a2:b1:33:ae:50:48:4a:5e:0c:88:
24:d4:1d:a5:80:2e:ca:5a:43:0f:6c:70:6a:e3:d0:09:f7:9e:
65:03:ed:87:8d:ae:53:08:91:6b:a9:b1:fe:91:0f:58:32:9f:
ad:33:5e:22:83:63:ce:78:71:6a:d1:f2:f1:eb:2a:d4:ab:b1:
20:41:93:5d:a1:f1:1f:9a:82:51:28:8f:80:4c:ec:53:1c:d1:
6b:b4:3d:6b:bc:2b:19:3a:7a:90:c8:b5:6d:fa:7d:af:c4:97:
3c:fe:38:fc:c4:99:d7:13:12:dc:17:44:c4:f8:40:2a:33:0a:
5b:52:91:5e:22:b5:6e:27:88:b9:13:93:bd:8f:ca:e0:0f:de:
73:42:fa:e4:14:03:fe:1e:0d:6f:8b:7d:7d:83:5f:e9:24:31:
ae:69:e4:d5:33:76:21:81:64:d1:0b:6f:25:d1:81:f6:56:7b:
37:a6:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:12:04 2026 by rpki-client